Why i cann't email to majord...@openssl.org
Hi, I want to subscribe openssl.org mail list,but i cann't send email to the mail server of openssl.org. As the same time, i can send email to anyway,as gmail.com,hotmail.com,postfix.org, etc . This is the error information,pls help. Best regards LEON This is the mail system at host mail.kingdest.com. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system majord...@openssl.org: host master.openssl.org[194.97.152.144] said: 550 5.7.1 Client host rejected: cannot find your hostname, [218.107.54.52] (in reply to RCPT TO command) Reporting-MTA: dns; mail.kingdest.com X-Postfix-Queue-ID: E8F2C20938 X-Postfix-Sender: rfc822; l...@kingdest.com Arrival-Date: Sun, 16 Sep 2012 00:00:25 +0800 (CST) Final-Recipient: rfc822; majord...@openssl.org Original-Recipient: rfc822;majord...@openssl.org Action: failed Status: 5.7.1 Remote-MTA: dns; master.openssl.org Diagnostic-Code: smtp; 550 5.7.1 Client host rejected: cannot find your hostname, [218.107.54.52] ForwardedMessage.eml From: LEON l...@kingdest.com Date: 09/16/2012 12:00 AM To: majord...@openssl.org auth d18d0631f5e55fe1 subscribe openssl-users l...@kingdest.com smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
* LEON l...@kingdest.com: [1]majord...@openssl.org: host master.openssl.org[194.97.152.144] said: 550 5.7.1 Client host rejected: cannot find your hostname, [218.107.54.52] (in reply to RCPT TO command) $ host 218.107.54.52 Host 52.54.107.218.in-addr.arpa. not found: 3(NXDOMAIN) That's why. Your server doesn't have an reverse DNS entry. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
Re: Why i cann't email to majord...@openssl.org
Hi, This is my static ip mail server,ISP give me the ip,and i install the bind9 in this mail server,can you tell me how to do ? The bind config file has mail record. @IN MX10 mail.kingdest.com. mailINA218.107.54.52 On 09/16/2012 12:06 AM, Ralf Hildebrandt wrote: * LEONl...@kingdest.com: [1]majord...@openssl.org: host master.openssl.org[194.97.152.144] said: 550 5.7.1 Client host rejected: cannot find your hostname, [218.107.54.52] (in reply to RCPT TO command) $ host 218.107.54.52 Host 52.54.107.218.in-addr.arpa. not found: 3(NXDOMAIN) That's why. Your server doesn't have an reverse DNS entry. smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
* LEON l...@kingdest.com: Hi, This is my static ip mail server,ISP give me the ip,and i install the bind9 in this mail server,can you tell me how to do ? You ISP needs to setup the reverse DNS entry (I guess). -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
Re: Why i cann't email to majord...@openssl.org
Hi, Contact ISP is a good way,but my ISP cann't do it for me.Is there another way? By the way,how to avoid receive the mail that i post to this mail list? On 09/16/2012 12:22 AM, Ralf Hildebrandt wrote: * LEONl...@kingdest.com: Hi, This is my static ip mail server,ISP give me the ip,and i install the bind9 in this mail server,can you tell me how to do ? You ISP needs to setup the reverse DNS entry (I guess). smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
* LEON l...@kingdest.com: Hi, Contact ISP is a good way,but my ISP cann't do it for me.Is there another way? The nameservers for the subnet your server is in are: 54.107.218.in-addr.arpa name server gz1-dns.gdgz.cncnet.net. 54.107.218.in-addr.arpa name server gz2-dns.gdgz.cncnet.net. The SOA Record is: 54.107.218.in-addr.arpa has SOA record gz1-dns.gdgz.cncnet.net. root.gz1-dns.gdgz.cncnet.net. 20021210 10800 3600 604800 86400 So try contacting r...@gz1-dns.gdgz.cncnet.net (hm, doesn't work). WHOIS says: route: 218.107.0.0/18 descr: CNC Group CHINA169 Guangdong Province Network country:CN origin: AS17816 mnt-by: MAINT-CNCGROUP-RR changed:ab...@cnc-noc.net 20060118 source: APNIC So maybe try ab...@cnc-noc.net (although this seems to be a bit over the top, rather contact your sales representative) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
Re: Why i cann't email to majord...@openssl.org
What command to get this information? 54.107.218.in-addr.arpa name server gz1-dns.gdgz.cncnet.net. 54.107.218.in-addr.arpa name server gz2-dns.gdgz.cncnet.net. The SOA Record is: 54.107.218.in-addr.arpa has SOA record gz1-dns.gdgz.cncnet.net. root.gz1-dns.gdgz.cncnet.net. 20021210 10800 3600 604800 86400 Can you introduce a input methon can intelligent input english？ On 09/16/2012 12:34 AM, Ralf Hildebrandt wrote: * LEONl...@kingdest.com: Hi, Contact ISP is a good way,but my ISP cann't do it for me.Is there another way? The nameservers for the subnet your server is in are: 54.107.218.in-addr.arpa name server gz1-dns.gdgz.cncnet.net. 54.107.218.in-addr.arpa name server gz2-dns.gdgz.cncnet.net. The SOA Record is: 54.107.218.in-addr.arpa has SOA record gz1-dns.gdgz.cncnet.net. root.gz1-dns.gdgz.cncnet.net. 20021210 10800 3600 604800 86400 So try contacting r...@gz1-dns.gdgz.cncnet.net (hm, doesn't work). WHOIS says: route: 218.107.0.0/18 descr: CNC Group CHINA169 Guangdong Province Network country:CN origin: AS17816 mnt-by: MAINT-CNCGROUP-RR changed:ab...@cnc-noc.net 20060118 source: APNIC So maybe try ab...@cnc-noc.net (although this seems to be a bit over the top, rather contact your sales representative) smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
your ISP is resposible for PTR's of HIS addresses he CAN and he have to if he refuses search a professional ISP and consider reading manuals what you are needing for a well working mail service Am 15.09.2012 18:27, schrieb LEON: Contact ISP is a good way,but my ISP cann't do it for me.Is there another way? By the way,how to avoid receive the mail that i post to this mail list? On 09/16/2012 12:22 AM, Ralf Hildebrandt wrote: * LEONl...@kingdest.com: Hi, This is my static ip mail server,ISP give me the ip,and i install the bind9 in this mail server,can you tell me how to do ? You ISP needs to setup the reverse DNS entry (I guess) signature.asc Description: OpenPGP digital signature
Re: Why i cann't email to majord...@openssl.org
Am 15.09.2012 18:52, schrieb LEON: What command to get this information? 54.107.218.in-addr.arpa name server gz1-dns.gdgz.cncnet.net. 54.107.218.in-addr.arpa name server gz2-dns.gdgz.cncnet.net. The SOA Record is: 54.107.218.in-addr.arpa has SOA record gz1-dns.gdgz.cncnet.net. root.gz1-dns.gdgz.cncnet.net. 20021210 10800 3600 604800 86400 Can you introduce a input methon can intelligent input english your IP: 218.107.54.52 [harry@srv-rhsoft:~]$ host 218.107.54.52 Host 52.54.107.218.in-addr.arpa. not found: 3(NXDOMAIN) [harry@srv-rhsoft:~]$ dig NS 52.54.107.218.in-addr.arpa. ; DiG 9.9.1-P3-RedHat-9.9.1-9.P3.fc17 NS 52.54.107.218.in-addr.arpa. ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 65479 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;52.54.107.218.in-addr.arpa.IN NS ;; AUTHORITY SECTION: 54.107.218.in-addr.arpa. 42 IN SOA gz1-dns.gdgz.cncnet.net. root.gz1-dns.gdgz.cncnet.net. 20021210 10800 3600 604800 86400 signature.asc Description: OpenPGP digital signature
Re: Why i cann't email to majord...@openssl.org
* LEON l...@kingdest.com: What command to get this information? host -t ns 54.107.218.in-addr.arpa -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
Re: Why i cann't email to majord...@openssl.org
How to avoid receive the mail that i post to this mail list? On 09/16/2012 01:00 AM, Ralf Hildebrandt wrote: * LEON l...@kingdest.com: What command to get this information? host -t ns 54.107.218.in-addr.arpa smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
Am 15.09.2012 19:08, schrieb LEON: *How to avoid receive the mail that i post to this mail list? * On 09/16/2012 01:00 AM, Ralf Hildebrandt wrote: * LEON l...@kingdest.com: What command to get this information? host -t ns 54.107.218.in-addr.arpa why do you scream with HTML to a mailing-list? * you are on the mailing-list * you are posting to the list * all list members get your message * you are a list-meber * so you get the message * where is the problem? signature.asc Description: OpenPGP digital signature
Re: Why i cann't email to majord...@openssl.org
On Sun, 16 Sep 2012 01:08:58 +0800 LEON l...@kingdest.com wrote: How to avoid receive the mail that i post to this mail list? Stop posting to the list. On 09/16/2012 01:00 AM, Ralf Hildebrandt wrote:* LEON l...@kingdest.com: What command to get this information? host -t ns 54.107.218.in-addr.arpa -- John
Re: Why i cann't email to majord...@openssl.org
Many mail list have a web page to modify the users subscription options,but i cann't find that about this mail list. Roundcube's users subscription option: Receive your own posts to the list? Ordinarily, you will get a copy of every message you post to the list. If you don't want to receive this copy, set this option to No. On 09/16/2012 01:23 AM, Reindl Harald wrote: Am 15.09.2012 19:08, schrieb LEON: *How to avoid receive the mail that i post to this mail list? * On 09/16/2012 01:00 AM, Ralf Hildebrandt wrote: * LEONl...@kingdest.com: What command to get this information? host -t ns 54.107.218.in-addr.arpa why do you scream with HTML to a mailing-list? * you are on the mailing-list * you are posting to the list * all list members get your message * you are a list-meber * so you get the message * where is the problem? smime.p7s Description: S/MIME Cryptographic Signature
Re: Why i cann't email to majord...@openssl.org
Top-posting fixed. Please stop the top-posting and HTML. Thank you. On Sun, Sep 16, 2012 at 01:41:40AM +0800, LEON wrote: On 09/16/2012 01:23 AM, Reindl Harald wrote: Am 15.09.2012 19:08, schrieb LEON: *How to avoid receive the mail that i post to this mail list? * * you are on the mailing-list * you are posting to the list * all list members get your message * you are a list-meber * so you get the message * where is the problem? Many mail list have a web page to modify the users subscription options,but i cann't find that about this mail list. This is a Majordomo list. The Major does not offer that feature. http://www.postfix.org/lists.html http://www.greatcircle.com/majordomo/ Another issue is that this is the Postfix users mailing list, where issues regarding use of the Postfix MTA are to be discussed. It is not intended to be a general how do I use email? list. That said, you can probably work out a way in your MUA to avoid seeing your own posts to the lists. Consult the documentation and support forum for your MUA (mail user agent.) This might also be done using a filtering MDA (mail delivery agent.) Dovecot IMAP has a sieve extension called Pigeonhole, which works with Dovecot's LDA (local delivery agent.) And of course there is always old procmail(1) for shell users. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if /dev/rob0 is in the Subject:
Cleaning out certain 4xx-errors
Ok, I am seeing a lot of mail on one of our machines. They are all headed for a few servers running PLESK. It appears that (from google'ing) that this software generates a 451 error when a recipients mailbox is full It is possible to have postfix kill of these messages and treat a 451 from certain servers as a permanent error?
Re: Cleaning out certain 4xx-errors
Jan Johansson: Ok, I am seeing a lot of mail on one of our machines. They are all headed for a few servers running PLESK. It appears that (from google'ing) that this software generates a 451 error when a recipients mailbox is full It is possible to have postfix kill of these messages and treat a 451 from certain servers as a permanent error? Maybe PLESK has an option to make mailbox full a hard error (to be honest, Postfix's own mailbox full action is not configurable). Otherwise you can try to use the smtp_reply_filter feature. This is an incedibly sharp knife for desperate situations. Use at your own risk. Untested example: /etc/postfix/main.cf: smtp_reply_filter = /etc/postfix/smtp_reply_filter.pcre /etc/postfix/smtp_reply_filter.pcre: # This assumes that the reply is one line only. /^451 PLESK reply text here/ 551 5.2.2 Mailbox full Make the PCRE pattern as specific as possible, so that it matches only PLESK responses. Another option is to configure a specific SMTP client in master.cf for PLESK deliveries, put the smtp_reply_filter option in master.cf, and direct mail to this client with the transport_maps feature. References: RFC 3653 Section 3.3 http://www.postfix.org/postconf.5.html#smtp_reply_filter For the second option: http://www.postfix.org/master.5.html http://www.postfix.org/transport.5.html Wietse
Re: Cleaning out certain 4xx-errors
Once upon a time, Wietse Venema wie...@porcupine.org said: Maybe PLESK has an option to make mailbox full a hard error (to be honest, Postfix's own mailbox full action is not configurable). Unfortunately, no, it isn't. Plesk uses a milter to check delivery status during SMTP (which is nice, since that way it doesn't queue and cause back-scatter), but only returns a temporary error for over quota. Worse, it doesn't check until the end of DATA, so if any one recipient is over quota, the message is rejected (so you really don't want to turn a Plesk over-quota message into a permanent error, at least for messages with multiple recipients). I wrote a milter for our Plesk servers to check quota at RCPT TO time instead (and return a permanent error for over-quota) to fix the bad behavior. -- Chris Adams cmad...@hiwaay.net Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.
Re: Cleaning out certain 4xx-errors
On Sat, Sep 15, 2012 at 06:50:38PM -0500, Chris Adams wrote: Once upon a time, Wietse Venema wie...@porcupine.org said: Maybe PLESK has an option to make mailbox full a hard error (to be honest, Postfix's own mailbox full action is not configurable). Unfortunately, no, it isn't. Plesk uses a milter to check delivery status during SMTP (which is nice, since that way it doesn't queue and cause back-scatter), but only returns a temporary error for over quota. Worse, it doesn't check until the end of DATA, so if any one recipient is over quota, the message is rejected (so you really don't want to turn a Plesk over-quota message into a permanent error, at least for messages with multiple recipients). I wrote a milter for our Plesk servers to check quota at RCPT TO time instead (and return a permanent error for over-quota) to fix the bad behavior. Unfortunately that only replaces one potential problem with another. You're relying on SIZE in the MAIL command, which might be wrong or might be omitted. The only sure way to know the actual size of the mail is to receive the DATA. As with most quota implementations, it isn't perfect. IMO the best you can do is to allow the one mail that puts the user over quota, regardless how much it goes over. Then add the address to a check_recipient_access lookup. P.S.: I complied with your Reply-To: and sent the Cc:. It will fail SPF, if you're checking that. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if /dev/rob0 is in the Subject:
Re: Cleaning out certain 4xx-errors
Once upon a time, /dev/rob0 r...@gmx.co.uk said: On Sat, Sep 15, 2012 at 06:50:38PM -0500, Chris Adams wrote: I wrote a milter for our Plesk servers to check quota at RCPT TO time instead (and return a permanent error for over-quota) to fix the bad behavior. Unfortunately that only replaces one potential problem with another. You're relying on SIZE in the MAIL command, which might be wrong or might be omitted. The only sure way to know the actual size of the mail is to receive the DATA. I've found it to be a good enough solution. My checker takes the SIZE argument from MAIL FROM; if it isn't there, it assumes the largest message the server allows. It also adds a little to the size to allow for local headers (local Received: line, From_ header if mbox, etc.). This means that if the remote system doesn't set SIZE, it is possible for some small messages to be rejected that could have just fit under the quota. Almost all legitimate servers set SIZE; the only place I typically don't see it is from clients (and IIRC some do set it, but not from Microsoft). This also doesn't handle multiple messages come in at a time (especially if one is a large message from a slow remote system). P.S.: I complied with your Reply-To: and sent the Cc:. It will fail SPF, if you're checking that. That's not me; that's the list. -- Chris Adams cmad...@hiwaay.net Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.
